resync should ensure that serial ends up higher than a signed-serial

Binds inline zone signing increments the serial when it does things. Sometimes (eg if we make a change today, and it resigns today) the signed zone can end up serialed higher than the unsigned zone.

resync should pay attention to this... somehow.